Cyber Security

APPENDIX D

CYBER SECURITY TRAINING

A man, though wise, should never be ashamed of learning more, and must unbend his mind.

Sophocles

Generic cyber security training can cover a number of areas, such as:

• Certified Information Systems Security Professional (CISSP);¹

• information security governance;

• Payment Card Industry Data Security Standard (PCIDSS);²

• information risk management;

• ISO/IEC 27001;³

• Sarbanes–Oxley⁴ (for organisations listed on the New York Stock Exchange);

• Basel III (banking sector);⁵

• Control Objectives for Information and Related Technologies (COBIT 5);⁶

• Certificate of Cloud Security Knowledge (CCSK);⁷

• governance, risk and compliance;

• information security audit;

• business continuity;

• NCSC Certified Practitioner ...